
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json)
Hash identifier: BBhs9ukyzWK+OES3rJEp0PdpkaOUYNcCPYB5YVHi5iM=
Subject key identifier: 08:7B:35:D5:F2:F5:12:21:83:E4:0F:1B:09:B5:EA:6A:60:69:30:75
Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Certificate serial: 089E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
Manifest number: 07E3
Signing time: Tue 12 May 2026 22:19:00 +0000
Manifest this update: Tue 12 May 2026 22:18:59 +0000
Manifest next update: Tue 19 May 2026 22:18:59 +0000
Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: vgYBWwtm52rsaq0YP8tCBfIUZBCEg3/QRVNV7Fr4mtc=)
2: 632982C478E411F0B36C2173C4F9AE02.roa (hash: cFCH+NfdcPbE/C4X/bhECB2fPxHMgBj4PKDN/L6jhnI=)
3: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: 5MPW02+FWtp87+3JRBALYbpeia6WJ5SPfWoB7PVlecg=)
4: 03BA8B36824411EF94479387C4F9AE02.roa (hash: eh1uTKC6tkVJRkq8RjBwWq9qkvsNHm4pUfLbgOMIN2c=)
5: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: /xTj7xTsm7Y+p1ZvSo9zIww3Yk7EBjybsYmXsD416bI=)
6: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: JPCOlxoIy+z2DNQ0BspzKR/Qwx0mCFczeUvb2HAlSEs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:18:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2206 (0x89e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379
Validity
Not Before: May 12 22:18:59 2026 GMT
Not After : May 19 22:18:59 2026 GMT
Subject: CN=6a03a753-c271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:9d:a5:a8:cc:df:52:cc:53:bb:92:b9:db:
75:b5:c2:75:60:35:75:31:7e:4a:ee:d3:9b:84:0b:
79:32:b0:76:ce:2c:5c:01:eb:b8:ec:e9:03:f6:e2:
b6:5a:82:5a:d5:47:9e:6d:08:9f:94:eb:2b:9c:25:
78:34:6d:4c:f6:47:5f:c4:05:e3:af:f5:05:c5:d8:
7f:7e:e3:d0:3e:97:0c:96:01:27:d6:b2:eb:7a:9d:
99:d4:5c:96:f2:03:66:8f:6f:26:f6:d4:b5:a0:7c:
98:25:87:43:f6:fe:f4:95:21:70:42:9a:9d:6e:59:
a9:c4:e4:57:bd:cf:40:b6:8b:6b:99:05:40:8a:7d:
25:9e:74:ab:a4:03:44:74:1e:1b:d2:66:cb:a9:e8:
a2:f3:42:24:bb:81:85:70:5a:a2:df:7f:83:e7:b1:
45:ee:a2:a7:0b:1e:6b:6f:65:95:2d:69:d5:5b:70:
fc:8b:4d:5f:3c:36:55:39:9f:2f:46:e4:a7:5b:f9:
53:14:94:7e:37:ea:61:fa:b3:51:d3:e4:9d:7a:da:
39:53:74:7c:9c:3d:3e:9b:81:f4:17:ea:47:af:c6:
33:33:47:19:ce:b5:41:41:8d:68:d7:a3:9b:40:0d:
a9:c3:c2:40:ea:06:18:95:da:4e:c6:ec:ac:b6:63:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7B:35:D5:F2:F5:12:21:83:E4:0F:1B:09:B5:EA:6A:60:69:30:75
X509v3 Authority Key Identifier:
keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:5d:f2:68:1f:f5:43:59:9c:c7:62:d4:7d:2c:b2:34:84:ac:
eb:bd:a0:fb:29:6c:1e:97:c3:ec:d5:0d:30:13:ca:c8:ff:0f:
75:8a:8c:aa:46:4f:a1:d3:ef:2f:60:9c:7c:78:21:0b:56:d7:
9b:a5:3b:b2:13:1a:5f:5e:39:c6:ea:fe:20:b4:93:54:11:47:
a0:b7:dc:b8:78:a2:5e:53:27:c9:53:41:89:18:93:7c:43:52:
f4:81:90:90:60:1b:9e:6d:c9:32:ed:ba:fc:f8:a6:ec:96:c5:
f6:09:c9:b1:ef:36:cc:f6:43:49:31:5c:fd:4f:14:bc:80:ca:
28:d3:8a:80:dc:cd:56:6b:95:d9:13:f7:df:e7:ee:b5:ef:cf:
98:06:6e:9b:f2:5e:30:fe:f2:ce:2c:d3:27:37:ce:01:f0:62:
98:55:53:a1:8d:e2:b7:a6:f7:0b:cc:5b:1d:fe:25:cb:be:22:
2b:ec:c3:31:36:83:44:6f:13:b8:8a:34:29:be:eb:7f:85:eb:
53:e8:4e:39:8e:8b:7c:b7:93:42:cf:ce:ab:4d:36:fd:84:e5:
cd:0e:84:71:26:bc:b9:09:72:d3:32:44:c8:0e:30:6d:ff:d1:
e7:fc:ba:28:bb:02:e6:42:2e:9f:ce:6d:2e:44:0c:3b:70:9f:
da:35:cb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:10:10 2026 by rpki-client